gm-codex 2.0.943 → 2.0.945

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "gm-codex",
-  "version": "2.0.943",
+  "version": "2.0.945",
   "description": "State machine agent with hooks, skills, and automated git enforcement",
   "author": {
     "name": "AnEntrypoint",

package/bin/plugkit.sha256

@@ -1,6 +1,6 @@
-a20de8c4a3cd09bbd1bc1e1bb8362831847e7747f1e395a44c3b7514fb533f13  plugkit-win32-x64.exe
-a0f8b79cc7d734f5f84f2750f672554580277eb40c52934a247ca6a2121f7325  plugkit-win32-arm64.exe
-897bf8512084ca538a8eb1816ca9a47fcc2505818f2ca48233289518aea5f7bd  plugkit-darwin-x64
-008ebdb6c8ea63037549c2be02064d771259667fc32d2a0583de20e73ccc5c88  plugkit-darwin-arm64
-58cc4d2d62199d5c7cb4ff473a3110d195582824136bc62586edc0d4f5ac6683  plugkit-linux-x64
-2009f56910cfd08a44196da269f0b0c2af3474a007b41c4c22e0a38fdd2cca64  plugkit-linux-arm64
+35792710653dd3078e9477adff2f86729eda06a02a6eb6d3f4bcdffb86a2d82c  plugkit-win32-x64.exe
+948d78e276d49ec0dc29036c4482e5acbdc3d17f76e5d37c55ea237fab85642b  plugkit-win32-arm64.exe
+4136bad7948a04f5bd73ff775230fdaaa457d950ffebe2d33235dba254c7ca9b  plugkit-darwin-x64
+6143d75d97d7d3533c6bf1a08f386a71015acb10e3c47b2054b812f3cd792b26  plugkit-darwin-arm64
+1a1969863a7adeffd26cbed4886116a89af2d60a4b5d47f62c48c99aaaa3e397  plugkit-linux-x64
+b77ff35bced423aae62ee98ee73322757f5280bb98002921ff5d8deb13f678e4  plugkit-linux-arm64

package/bin/plugkit.version

@@ -1 +1 @@
-0.1.319
+0.1.320

package/bin/rtk.sha256

@@ -1,5 +1,5 @@
-120104b701271f017600bbd8738de2f4f33b2ad5f965c4c1ad0de1d541088e67  rtk-win32-x64.exe
-7b3abe29ddd1e90e72a5c66d4fe2be3a6fe032d2271c10ee11300872eddca938  rtk-win32-arm64.exe
+b4333386d862dea724500d1c74c5bbac942a5605792746b0c565f0b0e2b55bac  rtk-win32-x64.exe
+36435946d6e89e27ce7e860eb1b873c5974f6e1b6ad729d56e7dd52f0a861ab6  rtk-win32-arm64.exe
 1b1e792767ed0e1e6ca0e2f0a8de02e77b06dea2f5ae667278b94baf239fcdc3  rtk-darwin-x64
 9717978d9d6216ea50c94444e00e359479b6315a17bd48c16064b267c8b0b60d  rtk-darwin-arm64
 a100d3defac54194144e5723aec57e6f286b42298c67145c8428815246c9ee56  rtk-linux-x64

package/gm.json

@@ -1,6 +1,6 @@
 {
   "name": "gm",
-  "version": "2.0.943",
+  "version": "2.0.945",
   "description": "State machine agent with hooks, skills, and automated git enforcement",
   "author": "AnEntrypoint",
   "license": "MIT",
@@ -23,5 +23,5 @@
   "publishConfig": {
     "access": "public"
   },
-  "plugkitVersion": "0.1.319"
+  "plugkitVersion": "0.1.320"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gm-codex",
-  "version": "2.0.943",
+  "version": "2.0.945",
   "description": "State machine agent with hooks, skills, and automated git enforcement",
   "author": "AnEntrypoint",
   "license": "MIT",

package/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "gm",
-  "version": "2.0.943",
+  "version": "2.0.945",
   "description": "State machine agent with hooks, skills, and automated git enforcement",
   "author": {
     "name": "AnEntrypoint",

package/skills/gm-complete/SKILL.md

@@ -26,6 +26,7 @@ Failure triage: broken output to EMIT, wrong logic to EXECUTE, new unknown to PL
 - `git_clean` — `git status --porcelain` returns empty
 - `git_pushed` — `git log origin/main..HEAD --oneline` returns empty
 - `ci_passed` — every GitHub Actions run reaches `conclusion: success`
+- `mutables_resolved` — `.gm/mutables.yml` deleted OR every entry `status: witnessed`. Stop hook hard-blocks turn-stop while any entry is `status: unknown`.
 - `prd_empty` — `.gm/prd.yml` deleted AFTER residual scan: enumerate every in-spirit reachable residual surfaced this session; any hit re-enters `planning`, appends PRD items, executes. Empty PRD is necessary, not sufficient — done = empty PRD AND zero reachable in-spirit residuals. Out-of-spirit-or-unreachable residuals are named in the response and skipped; everything else is this turn's work.
 - `stress_suite_clear` — change walked through M1–D1 (governance), none flunked
 - `hidden_decision_posture` — open → down_weighted → closed only when CI is green AND stress suite is clear

package/skills/gm-emit/SKILL.md

@@ -48,8 +48,13 @@ Import the actual module from disk to witness current behavior as the baseline.
 
 Re-import from disk — in-memory state is stale and inadmissible. Run identical inputs as pre-emit; output must match the baseline exactly. Known variance → fix and re-verify (self-loop). Unknown variance → `planning`.
 
+## Mutables gate
+
+Before pre-emit run, read `.gm/mutables.yml`. Any entry with `status: unknown` → regress to `gm-execute`. The pre-tool-use hook hard-blocks Write/Edit/NotebookEdit while unresolved entries exist; trying to emit anyway returns deny. Zero unresolved is the precondition for every legitimacy question below.
+
 ## Gate (all true at once)
 
+- `.gm/mutables.yml` empty/absent OR every entry `status: witnessed` with filled `witness_evidence`
 - Legitimacy gate passed; no refused collapse
 - Pre-emit passed with real inputs and real error inputs
 - Post-emit matches pre-emit exactly

package/skills/gm-execute/SKILL.md

@@ -30,6 +30,8 @@ Resolves to KNOWN only when all four pass:
 
 Unresolved after 2 passes regresses to `planning`. Never narrate past an unresolved mutable.
 
+Every witness that resolves a mutable writes back to `.gm/mutables.yml` the same step: set `status: witnessed` and fill `witness_evidence` with concrete proof (file:line, codesearch hit, exec output snippet). No write-back = the mutable stays unknown and the EMIT-gate stays closed. The hook reads this file; the agent's memory of "I resolved it" does not unblock anything.
+
 Route candidates from PLAN are `weak_prior` only. Plausibility is the right to test, not the right to believe. A claim with no witness in the current session is a hypothesis — say so when stating it, and say what would settle it. The next reader (you, next turn) needs to know which lines were earned and which were carried forward.
 
 ## Verification budget

package/skills/planning/SKILL.md

@@ -37,6 +37,20 @@ Tag every item with a route family (grounding | reasoning | state | execution |
 
 Plan exits when zero new unknowns surfaced last pass AND every item has acceptance criteria AND deps are mapped.
 
+## .gm/mutables.yml — co-equal with .gm/prd.yml
+
+Every unknown surfaced during PLAN lands as an entry in `.gm/mutables.yml` the same pass. Live during work, deleted when empty. Hook-gated: Write/Edit/NotebookEdit and `git commit`/`git push` are hard-blocked while any entry has `status: unknown`; turn-stop is hard-blocked the same way.
+
+```yaml
+- id: kebab-id
+  claim: One-line statement of what is assumed
+  witness_method: exec:codesearch <query> | exec:nodejs import | exec:recall <query> | Read <path>
+  witness_evidence: ""
+  status: unknown
+```
+
+`status: unknown` → `witnessed` only when `witness_evidence` is filled with concrete proof (file:line, codesearch hit, dispatched test output). Resolution lives in gm-execute. PRD items reference mutables via optional `mutables: [id1, id2]` field; an item is blocked while any referenced mutable is unresolved.
+
 ## .prd format
 
 Path: `./.gm/prd.yml`. Write via `exec:nodejs` + `fs.writeFileSync`. Delete the file when empty.